3.7
Low
CVE-2026-97399 The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte…
Description
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| glibc 2.24 | 2.24 → < 2.45 | 2.45 |
References
- sourceware.org sourceware.org
- sourceware.org sourceware.org
Timeline
- Published
- Last modified
Other CVEs of glibc
The 35 CVEs of glibc →
CVE-2026-122054
BIG-HKSCS decoding hang on crafted input
5.9
Medium
CVE-2026-84243
The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable…
7.0
High
CVE-2026-95818
A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44…
3.6
Low
CVE-2026-86805
A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc)…
6.3
Medium